摘要: Level 0:re-write return address with smoke()'s address '0x08048ef0'so exploit file should be:----30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 f0 8e 04 08----'30' can be any byte valueLevel 1:re-wir... 阅读全文
posted @ 2010-04-15 19:33 .. 阅读(3841) 评论(0) 推荐(0)
摘要: 原来还有隐藏关phase_defusedCode highlighting produced by Actipro CodeHighlighter (freeware)http://www.CodeHighlighter.com/--(gdb)disassphase_defusedDumpofassemblercodeforfunctionphase_defused:0x08048f62<... 阅读全文
posted @ 2010-04-07 15:18 .. 阅读(2115) 评论(0) 推荐(0)
摘要: Your job is to defuse the bomb.A ”binary bomb” is an executable C program that consists of six phases. Each phase expects the studentto enter a particular string on stdin. If the student e... 阅读全文
posted @ 2010-03-27 10:04 .. 阅读(5111) 评论(0) 推荐(0)
摘要: Your job is to defuse the bomb.A ”binary bomb” is an executable C program that consists of six phases. Each phase expects the studentto enter a particular string on stdin. If the student e... 阅读全文
posted @ 2010-03-27 09:25 .. 阅读(6238) 评论(0) 推荐(0)
摘要: 准备工作:linux-2.6.33.tar.bz2解压cd linux-2.6.33在kernel/sys.c中添加系统调用[代码]在arch/x86/kernel/syscall_table_32.S种添加[代码]修改完毕,开始编译[代码]make xconfig 可以直接保存make 需要很长的时间编译安装完毕修改menu.lst[代码]重启--------------------- 我是分割... 阅读全文
posted @ 2010-03-11 22:41 .. 阅读(469) 评论(0) 推荐(0)
摘要: 输入: 4个整数输出: 由这4个整数经过加减乘除得到24的所有算法分析: 使用穷举,这些组合有多少?一个一般的算法总可以表示成加括号的情况。如 3*8/(8/8) 可写成 ((3*8)/(8/8))即忽略优先级,两两外加括号。((OXO)X(OXO)) 这样的形式,那么,括号有多少种放法呢?(((OXO)XO)XO)((OX(OXO))XO)((OXO)X(OXO))(OX(OX(OXO)))(O... 阅读全文
posted @ 2009-03-25 12:19 .. 阅读(1480) 评论(0) 推荐(0)
摘要: [代码] 阅读全文
posted @ 2008-12-28 12:32 .. 阅读(254) 评论(0) 推荐(0)
摘要: [代码] 阅读全文
posted @ 2008-11-17 16:50 .. 阅读(267) 评论(0) 推荐(0)
摘要: [代码] 阅读全文
posted @ 2008-11-10 22:35 .. 阅读(340) 评论(0) 推荐(0)
摘要: [代码] 阅读全文
posted @ 2008-11-02 22:52 .. 阅读(634) 评论(0) 推荐(0)